Microsoft Corporation Runs periodic eBPF tracing snapshots. PT37M false 2020-01-01T00:00:00Z true S-1-5-18 HighestAvailable %comspec% /c ""%ProgramFiles%\ebpf-for-windows\ebpf_tracing.cmd" periodic /trace_path "%SystemRoot%\Logs\eBPF" /max_file_size_mb 30 /max_committed_folder_size_mb 200 /max_committed_rundown_state_files 1 /compress_rundown_state_files false"